Privacy Policy

This Privacy Policy explains how Pravion Technologies (“we”, “us”) handles personal data when you use the Messagely website and service (“Messagely”). We follow the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian law.

1. Who is responsible

For data about our customers (the businesses that sign up for Messagely) and visitors to this website, Pravion Technologies is the Data Fiduciary.

For the data of our customers’ own customers and contacts (“end users”) that we process on a customer’s behalf, the customer is the Data Fiduciary and Pravion Technologies acts as the Data Processor. The customer decides why that data is used and is responsible for having valid consent from its end users.

2. Data we collect

From customers (businesses)

• Account details: name, business name, email, phone number, billing and GST details, and login credentials (passwords are stored hashed).
• Contact form and demo requests: name, business, phone, email and message.
• Usage and device data: IP address, browser type, pages visited, and logs needed to run and secure the service.
• Billing records and payment status. Card or UPI details are handled by our payment provider; we do not store full card numbers.

From end users, on behalf of customers

• Phone number and WhatsApp profile name.
• Contact details and attributes a customer uploads or enters (for example name, city, tags, opt-in status and source).
• Messages sent and received through the customer’s WhatsApp Business Account, including text, media, templates, delivery and read status, and timestamps.

WhatsApp account data

When a customer connects through Meta’s Embedded Signup, we receive and store, with the customer’s permission, the WhatsApp Business Account ID, phone number ID, display name, message template data and an access token. We use these only to operate that customer’s account inside Messagely.

3. Why we use data

• To provide Messagely: sending and receiving messages, managing templates, showing reports and running automations as the customer instructs.
• To create accounts, bill, provide support, and respond to enquiries.
• To keep the service secure, prevent abuse and spam, and meet our legal obligations.
• To improve the service, using aggregated or de-identified information where possible.
• To send service notices. We send marketing about Messagely to customers only with consent or as the law allows, and you can opt out at any time.

We do not use end-user message content for advertising, and we do not use it to train AI models.

4. We do not sell data

We do not sell personal data, and we do not share it for third-party advertising.

5. Sub-processors and sharing

We share data only with providers that help us run Messagely, under written terms that require them to protect it:

We may also disclose data when required by law, court order or a lawful request from an authority, or to protect rights and safety. If our business is sold or reorganised, data may be transferred to the successor under this policy. Some providers may process data outside India; we do so only as permitted by the DPDP Act and any restrictions notified by the Government of India.

6. Retention

• Account data: for as long as the account is active, then deleted or anonymised within 90 days after closure, unless the law requires us to keep it.
• Messages and contacts: kept while the customer’s account is active so they can use their history. Customers can delete contacts and conversations at any time. After account closure, we delete them within 90 days.
• Billing records: kept for up to 8 years, as required by Indian tax and accounting law.
• Security logs: kept for up to 12 months.
• Backups: deleted data is removed from backups within 35 days.

7. Security

We use reasonable safeguards, including encryption in transit (HTTPS/TLS), encryption of access tokens at rest, role-based access controls, restricted staff access, and logging. No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected persons as the DPDP Act requires.

8. Your rights

Under the DPDP Act, you may:

• ask for a summary of the personal data we process and who we share it with;
• ask us to correct, complete or update your data;
• ask us to erase your data, unless we must keep it by law;
• withdraw consent at any time (this does not affect earlier lawful processing);
• seek grievance redressal, and nominate another person to exercise your rights if you die or become unable to.

If you are an end user of one of our customers, please contact that business first. You can also write to us and we will help or pass your request to the business. To request deletion, see our Data Deletion page. If you no longer want messages from a business, reply STOP or use the opt-out option in the chat.

9. Children

Messagely is for businesses and is not directed at children under 18. Our customers must not use it to process children’s data without verifiable parental consent as the DPDP Act requires.

10. Cookies

This marketing website uses only essential storage and does not use advertising cookies. If we add analytics, we will update this section.

11. Grievance contact

For questions, requests or complaints about your data, contact our Grievance Officer: Grievance Officer, Pravion Technologies, Sarvad, Maliya-Miyana, Gujarat 363660, India. Email: [email protected]. Phone: +91 76238 68808. We acknowledge requests within 3 working days and aim to resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India once it is operational.

12. Changes

We may update this policy. The date at the top shows the latest version, and we will notify customers of material changes.